12173 matches found
CVE-2020-8244
A buffer over-read vulnerability exists in bl 4.0.3, 3.0.1, 2.2.1, and 1.2.3 which could allow an attacker to supply user input even typed that if it ends up in consume argument and can become negative, the BufferList state can be corrupted, tricking it into exposing uninitialized memory via...
Debian: Security Advisory (DLA-2354-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization for ARM 64 3.0.6.0 : libjpeg-turbo (EulerOS-SA-2020-1910)
According to the version of the libjpeg-turbo package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in getrgbrow in rdppm.c via a malformed P...
EulerOS 2.0 SP8 : file (EulerOS-SA-2020-1845)
According to the versions of the file packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - dobidnote in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to fileprintf and filevprintf.CVE-2019-8904 -...
MGASA-2020-0347 Updated qt4 and qt5base packages fix security vulnerability
The readxbmbody function in gui/image/qxbmhandler.cpp has a buffer over-read CVE-2020-17507...
Updated qt4 and qt5base packages fix security vulnerability
The readxbmbody function in gui/image/qxbmhandler.cpp has a buffer over-read CVE-2020-17507...
Amazon Linux 2 : poppler (ALAS-2020-1481)
The version of poppler installed on the remote host is prior to 0.26.5-42. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1481 advisory. An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function...
RHEL 7 : kernel-alt (RHSA-2020:3545)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3545 advisory. The kernel-alt packages provide the Linux kernel version 4.x. Security Fixes: kernel: Denial Of Service in the ipmibmcregister function in...
Open-Xchange: Incomplete fix for CVE-2020-12673 : Specially crafted NTML message leads to buffer over read
The vulnerability CVE-2020-12673 got fixed by https://github.com/dovecot/core/commit/fb246611e62ad8c5a95b0ca180a63f17aa34b0d8 adding this check if length datasize error = "buffer length out of bounds"; return FALSE; But this fix seems incomplete with regards to ntlmssptstri The fix should also ad...
Moderate: Red Hat Security Advisory: kernel-alt security and bug fix update
An update for kernel-alt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
Arbitrary Code Execution
qt5-qtbase is vulnerable to arbitrary code execution. The vulnerability exists through a buffer over-read readxbmbody in gui/image/qxbmhandler.cpp which allows an attacker to inject and execute arbitrary codes into the system...
Medium: poppler
Issue Overview: An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function PSOutputDev::checkPageSlice at PSOutputDev.cc. CVE-2019-10871 Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc.CVE-2018-21009 The JPXStream::init...
Internet Bug Bounty: CVE-2017-13041 The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6_nodeinfo_print().
Description: Versions of tcpdump before 4.9.2 are vulnerable to a buffer over-read in print-icmp6.c. This vulnerability was disclosed to the tcpdump maintainers and was recently patched in version 4.9.2 and disclosed as CVE-2017-13041. Patch:...
Internet Bug Bounty: CVE-2017-13040 The MPTCP parser in tcpdump before 4.9.2 has a buffer over-read in print-mptcp.c, several functions.
Description: Versions of tcpdump before 4.9.2 are vulnerable to a buffer over-read in print-mptcp.c. This vulnerability was disclosed to the tcpdump maintainers and was recently patched in version 4.9.2 and disclosed as CVE-2017-13040. Patch:...
PT-2020-6462
Name of the Vulnerable Software and Affected Versions QEMU version 5.0.0 Description The issue is related to a buffer over-read in the QEMU hardware emulation, specifically in the hw/usb/hcd-ohci.c file. This can allow an attacker to access confidential data, compromise data integrity, and cause ...
CVE-2020-24344
JerryScript through 2.3.0 has a functiona=argumentsconst arguments buffer over-read...
CVE-2020-24344
JerryScript through 2.3.0 has a functiona=argumentsconst arguments buffer over-read...
CVE-2020-24344
JerryScript through 2.3.0 has a functiona=argumentsconst arguments buffer over-read...
CVE-2020-24344
JerryScript up to version 2.3.0 is affected by a buffer over-read in a function using a default parameter (function({a=arguments}){const arguments}). The issue is described across multiple sources as a buffer over-read in JerryScript 2.3.0 and earlier. The provided documents do not specify the ex...